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1 PROCEE D NGS 


2 THE CLERK: Court calls Criminal Action 21-10104, 


3 United States v. Klyushin. Could counsel please identify 
4 themselves. 


5 MR. FRANK: Stephen Frank and Seth Kosto for the 


6 United States, your Honor. 
7 THE COURT: Good morning. 


8 MR. KOSTO: Good morning. 


9 MR. FERNICH: Good morning, Judge. Marc Fernich and 


09:51 10 Max Nemtsev for Mr. Klyushin. 


11 THE COURT: Thank you. 


12 MR. NEMTSEV: Good morning, your Honor. 


13 THE COURT: And Mr. Klyushin is here. 


14 (Interpreter Tetradze duly sworn.) 


15 THE COURT: All right, thank you. You may be seated, 
16 everybody. 


LS) So this morning we have two motions in front of the 


18 Court, a motion to dismiss and a motion to suppress. I don't 


19 know if you have a particular order that you'd like to go in, 


09:51 20 but the defense is the moving party. 


21 MR. FERNICH: Judge, do you want me to stand, sit? 


22 THE COURT: Stand. 


23 MR. FERNICH: Stand, okay. 


24 THE COURT: It's just easier for us all to hear. 


25 And, Mr. Klyushin, if at any point you can't 
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1 understand -- I think the equipment is working now, right? —- 


2 if there's an issue, let me know. 


Si Okay, go ahead. 


4 MR. FERNICH: Judge, I don't really have that much to 


5 add to the papers. Notwithstanding my friends on the other 


6 side's suggestion that the papers were sort of summary or 


- underdeveloped, I thought that they're very well cooked, and I 


8 don't believe in rehashing what's in the papers, but I did want 


£ 


9 to point out a couple of items that are maybe outside the 


09:52 10 papers to start off our discussion this morning. And it 


11 occurred to me, in reviewing the papers, that the government 


12 calls Dorozhko —- and I don't know if I'm saying that right —- 


£ 


13 a textbook securities fraud case, and they repeat that a bunch 


14 of times in the papers, and leaving aside the arguments that 


£ 


15 we've made that the civil en 


orcement context is materially 


16 different than the criminal context for notice purposes, 
A) vagueness purposes, and due process purposes; and make no 


18 mistake, that's the heart of the motion. 


19 THE COURT: Can I ask, is there any case that has gone 


09:53 20 your way? 


21 MR. FERNICH: Other than the initial District Court 


22 Dorozhko 1 case decided in the Southern Distric f New York 


23 and -—- well, I guess it was the Eastern Distric IT don't 


24 remember right now -—- and overruled by the Second Circuit, no, 


25 because, to my knowledge, those are the only three cases that 
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1: materially address these issues at all. But -—- 


2 THE COURT: What do you mean by three cases? 


3 MR. FERNICH: Well, the District Court Dorozhko 


4 opinion went our way. 


5 THE COURT: And it was reversed by the Second Circuit, 


7 MR. FERNICH: Correct, Correct. 


8 THE COURT: And, to my knowledge -- I just want to 


9 make sure I'm remembering this -- no one else has really 
09:53 10 addressed it, and you're drawing on language from Supreme Court 
11 cases? 
12 MR. FERNICH: Yes. That's accurate. 


13 THE COURT: All right, so ina way, if I go with the 


14 Second Circuit, it's a placeholder to see if the First Circuit 


15 goes the same way? 


16 MR. FERNICH: Well, you know, that's the thing, Judge. 


17 It's kind of -- I'm not sure what -- and this is perhaps, you 


18 know, you're here to decide cases, not divine prosecutorial 


19 decision-making processes. But I don't know what this 
09:54 20 charge —- and this actually impacts the argument more 


21 globally -- there's no gap to fill here, so it's not clear why 


22 any, any case would need to charge this conduct as securities 


23 fraud. There's no —-— 


24 THE COURT: But that's —-- I can't go there. In other 


25 words, it's a prosecutorial right to charge if it's a viable 
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al claim. And under the Second Circuit case, the Dorozhko case, 


2 as I understand it, while it is in the civil context, it's 


3 directly on point, and essentially no other case has gone 


4 against it. 


5 MR. FE CH: Right, but even if your Honor were to —-- 


6 I think that's right, right? He cited it 
7 forward. 


8 MR. FERNICH: Yes. No, that's accurate. 


9 THE COURT: So it could potentially be that the First 


09:55 10 Circuit would go a different way, I suppose, but I read 


11 Dorozhko, and it made sense. 


12 MR. FERNICH: It may make sense in a civil context, 


13 and, you know, we can talk about that, but to make the jump 


14 that they did in Khalupsky ten years later, without any 


LS discussion to apply it in the criminal context, is really the 


16 crux of our argument here. And the reason why it's the crux of 


17 our argument is that there is an entirely different set of 


18 considerations deriving from the Fifth Amendment that didn't 


19 apply in Dorozhko; and the most important considerations are 


09:55 20 notice, vagueness, and the ability to -- 


21 THE COURT: I forget. What year was Khalupsky? 


22 MR. FERNICH: Excuse me, your Honor? 


23 THE COURT: Which -- Dorozhko was what year? 


24 MR. FERNICH: "O09. I believe it was '09. And then 


25 Khalupsky —-- 
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alt ‘HE COURT: Dorozhko was 2009. 


2 . FERNICH: Yes. 


3 COURT: And when was the other one? 


4 . FERNICH: Well, that was in 2021, and it was 


5 issued —-- 


6 THE COURT: 2021. So that if, allegedly, this bad 


7 trade happened in January of 2020, you're saying that it wasn't 


8 until -- is that what your argument is? 


9 MR. FERNICH: Yes. 
09:56 10 THE COURT: -- until Khalupsky that they didn't have 


11 notice it would be applied criminally? 


12 MR. FERNICH: Well, that's the significant part of the 
13 argument, but even if we go back to Khalupsky in the first 
14 instance, query whether that's rightly decided without 


LS grappling notice considerations that were at issue there, this 


16 is a much stronger case because the Khalupsky decision, the 


LS) only decision applying Dorozhko in a criminal context, 


18 postdates the offense conduct. 


19 THE COURT: Okay. All right, thank you. I mean, was 
09:56 20 there anything else? 


21 MR. FERNICH: I don't think that -- I mean, your 


22 Honor, I believe your Honor has it. If there's questions -—- 


Dp 


23 THE COURT: I've got it. But a motion to suppress, 


24 want to spend a lot of time on that. This is a fairly narrow 


25 issue. 
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1 MR. FERNICH: It is. 


2 THE COURT: Okay, thank you. 


3 Who's going to pick this one up. 


4 MR. FRANK: I'm handling this one, your Honor. 
5 THE COURT: Okay, thank you. 


6 MR. FRANK: You know, Khalupsky obviously was a 


a criminal case, but what I would say is that the statute, the 


8 underlying statute is the statute that has both criminal and 


9 Civil applications. So when the court in Dorozhko construed 


09:57 10 Khalupsky, it wasn't construing it -- it was a civil case, but 


11 it wasn't construing it simply for civil purposes. It was 


12 construing the statute, which has a criminal application. 


13 And the decision, while it arose in a novel context of 


14 computer hacking, the actual construction of the statute was 


is) not novel at all. In fact, what the defense is asking for here 


16 is a novel construction of the statute that would result ina 


17 significant narrowing of the interpretation of Section 10(b) in 


18 a way that no court has ever done. What they're asking this 


19 Court to say is that an affirmative misrepresentation is not 


09:57 20 deceptive conduct for purposes of Section 10(b), unless it 


21 occurs in violation of a fiduciary or fiduciary-like duty. No 


22 court has ever held that, and in fact every court that has 


23 addressed the issue has gone the opposite way. Rule 10 (b) (5) 


24 explicitly makes it unlawful to make any untrue statement of 


25 material fact, full stop. And all that Dorozhko did is apply 
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i that, and Khalupsky after it, apply that in the context of a 


2 hack and trade, to say that in certain contexts, if there is an 


3 untrue statement of material fact in order to gain material 


4 nonpublic information that is then used to -- 


5 THE COURT: But here the untrue statement of fact is 


6 the identity to get into the -- what would it be, the server? 


7 MR. FRANK: That's exactly right, your Honor, to get 
8 into the network. And so —- 


9 THE COURT: The network. 


09:58 10 MR. FRANK: the defendant and his coconspirators 


11 misrepresented themselves in order to gain access to the 


12 network, to steal the materially nonpublic information, and 


13 then they used that in connection with the purchase or sale of 


14 a security. So it's squarely addressed by those cases, and 


15 those cases in turn don't really do anything new in terms of 


16 the securities fraud statute other than apply it. 
A} THE COURT: So have any cases come out the other way? 


18 MR. FRANK: No, not to my knowledge. 


19 THE COURT: Okay. Well, we couldn't find one, you 


09:59 20 couldn't find one, so I think Dorozhko is controlling law and 


21 its successor case, and I'm going to deny the motion to 
22 dismiss. But let's go on to the motion to suppress, which I 
23 find a lot harder just to even understand what's happening 


24 here, so it's more complex. 


25 MR. NEMTSEV: I can give a brief overview of 


Case 1:21-cr-10104-PBS Document 114 Filed 11/18/22 Page 10 of 59 


10 


1 happening in the search warrants. 


2 THE COURT: And let me start from basics because I 


3 having a hard time getting my head around it. There's the 


4 September warrant? 


6 U : And the October warrant? 


7 . IMTSEV: 


8 THE COURT: And both of you spend a lot of 


9 both warrants. 


09:59 10 MR. NEMTSEV: Yes. 


11 COURT: But only the October warrant is really at 


12 IT have that wrong? 


13 MR. NEMTSEV: The October warrant yielded all of the 


14 evidence. 


15 THE COURT: Okay. 


16 MR. NEMTSEV: The September warrant —--— 


A} THE COURT: So I just need to understand why I need to 


18 slog through September, which doesn't seem to be referenced or 


19 incorporated by reference in October. So that's my big 


10:00 20 starting question. As I understand it, the September warrant 


21 didn't yield anything, and neither is the government seeking t 


22 introduce anything from the Google information? Is that right: 


23 MR. KOSTO: That is correct, your Honor. 


24 THE COURT: So is this really about, just to get my 


25 head around this, the October warrant and the Apple account? 
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iL: MR. NEMTSEV: The October warrant and the Apple 


2 account are the main -- 


3 THE COURT: Okay, so I want to make sure 


4 understanding it correctly. 


is MR. NEMTSEV: Yes, but September, the warrant that 


6 issued that -- 


7 THE COURT: Could you speak into the mic. 


8 MR. NEMTSEV: "m sorry. The September 


9 THE COURT: You're tall, and these mics don't do well 


10 with that, okay? 


11 MR, NEMTSEV: wish I could pick it up, your Honor, 


12 and walk around a little bit. So the September warrant leads 


13 them to discover the iCloud account that then they go and get 


14 an additional October warrant for, that then leads to the 


15 seizure of the entire iCloud account. So the September warrant 


16 is key to getting to October. If they don't get a lot of 


17 information, the only -- 


18 THE COURT: So what do they get from September? 


19 MR. NEMTSEV: From September, they get the location 


10:01 20 and the identification numbers that they then search through 


21 the October warrants. If there was no September, there would 


22 be no October, in essence, because they wouldn't discover an 
23 additional —- 
24 THE COURT: But they can't get in, right, because it's 


25 locked? 
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iL: MR. NEMTSEV: The September one was locked, but they 


2 got additional information from Apple leading them to the 


3 second Apple iCloud ID that they then search in October. Had 


4 they not had the September warrant, they would have never 


5 discovered the subsequent Apple ID. 


6 THE COURT: Okay, this is helpful. So you're saying, 


7 if the September warrant was bad somehow, then even if October 


8 was pure as snow —-— 


9 : IMTSEV: t would still be bad. 


10:01 10 : —- it would still flow from that? 


11 ‘ IMTSEV: Exactly. 


12 THE COURT: Because the information was included in 


13 the October? 


14 MR. NEMTSEV: Because the information was, yeS, waS a 


15 necessary component of the October warrant. 


16 THE JRT: Was it mentioned in the October? 


Ly MR. IMTSEV: t was. It was, your Honor. 


18 JRT: It was? 


19 MR. IMTSEV: t was, it was. 


10:02 20 THE JRT: I just say, I'm having a little 


21 trouble here because Interpreter is right behind. I'm just 


22 trying to figure out it can be a little softer. 


23 (Discussion the record.) 


24 THE COURT: 11 right, so you're saying I do have to 


25 resolve the September issue? 
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alk MR. NEMTSEV: You do, your Honor, you have to resolve 


2 the September issue; and then if we lose on the September 


3 issue, then we still have a chance on the October issue, which 


4 ultimately results in the iCloud seizure. 
5 THE COURT: Okay, thank you. All right, so are you 


6 going to be arguing the motion? 


a MR. NEMTSEV: will, your Honor. 


8 THE COURT: Okay, good. Thank you. That was helpful. 


9 MR. NEMTSEV: So, aS a matter of fact, I don't want to 


10:03 10 spend too much time on it because I think we detailed all of 


11 the allegations in there and our response to them and the flaws 


12 that the -- 


13 THE COURT: No, you need to. At this point, this is 


14 far more complicated than whether or not I follow the Second 


15 Circuit law or not. 


16 MR. NEMTSEV: Okay. So, your Honor, first, I'd like 


17 to start off with the fact that this is novel in the sense of 


18 there's no published decisions in the First Circuit or the 


19 District of Massachusetts exploring iCloud search warrants. 


10:03 20 And iClouds are different than a cellphone, than an email 


£ 


21 account, in the sense that they contain not one image of a 


22 phone or not one email address, but they can contain multiples. 
23 You know, they could contain all the information from any phone 


24 that you ever owned that was ever backed up and uploaded to the 


25 iCloud. The same goes for a MacBook. The same goes for any 
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alt email account that's been linked with the iCloud. And that's 


2 why, when they seized Mr. Klyushin's iCloud, they got 380 


3 gigabytes' worth of information, with data going back as far as 


4 May of 2005. It's a tremendous amount of information, and the 


5 government has access to all of it. They've seized all of it, 


6 and they've used it, obviously, against Mr. Klyushin, and 


7 they've also used it in getting subsequent warrants. 


8 THE COURT: The search warrant says that they only go 


9 back till 2018 and only can look for certain kinds of 


10:04 10 information. So you're saying that they exceeded the scope of 


11 the warrant? Is that the core claim? 


12 MR. NEMTSEV: Well, my argument is one of two. First, 


13 as it relates to the warrants, there's a particularity issue. 


14 The way that they describe fruits and instrumentalities, they 


15 used language "including six offenses, including nineteen 


16 categories." It's not exhaustive. It almost gives them th 


17 opportunity, the way it's written, to seize the entire iCloud 


18 account. And that's what happened here, your Honor. They did 


19 seize the entire iCloud account. And, yes, I agree that 


10:05 20 there's a temporal scope of January 1, 2018, to the present; 


21 but then in our bail filings, they use photographs that were 


22 taken in November of 2017. So it's an issue of both. It's 


23 either the government 


24 THE COURT: So let's assume for a minute that was an 


25 error and they shouldn't have done that because it exceeded th 
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1 scope of the warrant. Let's just say that for a second. 


2 MR. NEMTSEV: Yes. 


3 THE COURT: Why is that relevant to whether or not the 


4 search was valid as far as what's admissible at trial? Let's 


5 say I exclude all that stuff that preceded 2018. 


6 . NEMTSEV: But there's so much more there, your 


8 THE COURT: Okay, go ahead. 


9 MR. NEMTSEV: They have nineteen categories, but then 


10:06 10 they take thousands, tens of thousands of communications with 


1] his wife, with his employees, with his kids, pictures going 


12 back many, many years, 90,000, I believe, photos. They use 


13 that evidence not only to prosecute him, but they're going to 


14 use it in their case in chief. They used it in the bail 


15 filings. I'm sure they used that evidence to obtain subsequent 


16 search warrants of other individuals’ iCloud accounts. There's 


17 just no way to separate out what falls into the nineteen 


18 categories rather than what doesn't. 


19 THE COURT: So I'm just trying to understand. You're 
10:06 20 saying there are no other cases that figure out what you're 


21 supposed to do with an iCloud account? 


22 MR. NEMTSEV: There are cases, but not in the District 


23 of Massachusetts or the First Circuit that were published, your 
24 Honor. 


25 THE COURT: And are there any published cases from 
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alt other circuits or other districts? 


2 MR. NEMTS 


EV: The 


Yes, there are, your Honor. 


of New York where 


3 government cites one in the Southern District 


4 the court had a similar issue. But it wasn't thousands of 


5 documents that were taken that were outside the scope of the 


6 warrant, there were hundreds, and the court ultimately held an 


7 evidentiary hearing regarding how the searches were conducted 


8 by the government agents. 


9 THE COURT: Well, is there -- I'm showing my 


10:07 10 


ignorance -—- would there have been a way for the government, 


11 once address whether or not there's probable cause, to even 


12 go into the iCloud account? 


13 MR. NEMTS 


EV: Yes. 


THE COURT: 


Let's assume for a second ] 


find there is, 


but it has to do with the Avnet trade and it 


to 2020, 


is there a way 


for the government 


t's cabined at 2018 


to go into the 


since and 


17 cloud, I've never been there, figure out, "Well, 


18 we're only going to take these calendar years and these 


19 categories"? 


MR. NEMTS 


10:07 20 EV: Absolutely, your Honor, because what the 


21 government does, and what they did in this case, at least as 


22 


far as can tell -—- and they can represent to you whether 


23 that's accurate or not -—- is, when they received the entire 


24 iCloud account, they loaded it into a search program called 


25 Cellebrite. 


It's an Israeli company that unlocks -- 
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alt RT: A what? 


2 4 IMTSEV: Cellebrite. 


3 RT: All right, Celebrate? 


4 , IMTSEV: Cellebrite, C-e-l-l-e-b-r-i-t-e. 


5 : Not celebrate your birthday? 


6 ‘ IMTSEV: No, no, not celebrate. 


7 : All right, Cellebrite. 


8 MR. NEMTSEV: Barely anyone celebrates, your Honor, 


9 when they stop there, so it's located there. But they load it 


10:08 10 into that search program. It sorts all the data. So it's 


11 messages, images, videos, notes, whatever it may be. It 
12 sorts -- 


13 THE COURT: Can it sort by year? 


14 MR. NEMTSEV: t can sort by year. It can sort them 


15 chronologically. It can't obviously do the analysis for you, 


£ 


16 meaning you can't figure out whether, you know, something is 


17 relevant or not, but you can see that there's communications 


18 between Mr. Klyushin and his wife; there's communications 


19 between him and his children; you know, communications 


10:08 20 regarding sports, extracurricular activity, school, you know, 


21 things that are completely unrelated to an insider trading 


22 case, unrelated to any of the nineteen categories that the 


23 government says they're going to seize evidence of. 


24 THE COURT: So is this really an overbreadth case in 


25 terms of their seizure is too much? 
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i MR. N EV: They seized way too much, your Honor, 


2 way too much. 


3 THE COURT: Or at least -- I shouldn't say "seized" 


4 because maybe you need to give it to this Israeli company, bu 


5 in terms of what they can use, you're saying I should limit it 


6 to the 2018 period? 


7 MR. NEMTSEV: I don't think there's probable 


8 for the 2018 -- 


9 THE COURT: All right, let's start from the basics, 


10:09 10 why there's no probable cause. And I'll focus on the 
‘lal government about the 2018 because that's clearly what the 


12 magistrate judge allowed, 2018 to '20, whenever the search was. 


13 MR. NEMTSEV: To present up until Apple produced it, 


14 including any data that was created after the warrant issued, 


15 after the warrant was executed. 


16 THE COURT: All right, so why don't we go from A to Z, 


18 MR. NEMTSEV: So from A to Z —- 


19 THE COURT: The probable cause, why wasn't there 


10:09 20 probable cause? 


21 MR. NEMTSEV: From A to Z, your Honor. So this is an 


22 investigation that starts in September of 2019. The SI 


23 identifies groups of traders. There's dozens, 20, 30, 


24 individuals that they identify as individuals that had 


25 suspicious trading in their accounts. Agent Kang gets involved 
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1 in this investigation in November of 2019 when he gets access 


2 to all of the SEC's filings. He subsequently communicates with 


3 the filing agents in January and February of 2020 where they 


4 disclose to him that there might have been unauthorized 


5 intrusions. 


6 Mr. Klyushin comes into the picture in September of 


7 2020. There's no -—- your Honor could examine the affidavit, 


8 but only six paragraphs relate to Mr. Klyushin and his trading. 


9 There's pages upon pages and multiple paragraphs of analyses of 


10:10 10 Irzak and other traders who the government says engaged in 
11 parallel trading, although there's no evidence that any of them 


12 accessed a filing agent or reviewed it. There's nothing about 


13 that in the affidavit. 


14 Mr. Klyushin becomes a target when the government, 


is) subsequent to the September warrant, obtains a warrant for a 


16 different defendant, a codefendant, Ermakov. There they 


17 realized that he has a trading app belonging to Saxo Bank on 


18 his phone and locate a photograph of a January 23, 2020 


19 transaction in Avnet. They see that the account that he 


10:11 20 transacted in was a transaction for contract for differences 


21 rather than of purchase or sale or short sale of the shares. 


22 They realize that the account that he's transacting in belongs 


£ 


23 to Mr. Klyushin. They use that information to say that 


24 Mr. Klyushin is likely engaged in insider trading or parallel 


25 trading, and they make the connection that the transaction in 
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1. Avnet is consistent with a short position in Avnet that same 


2 day. They don't detail a lot about the other —- 


3 THE COURT: Let's just put a spotlight on that. Why 
4 isn't, at least with respect to that trade, there probable 


is cause? 


6 MR. NEMTSEV: Because that trade is outside the 


7 heartland of insider trading, your Honor. Let's say, as the 
8 government alleges —- 


9 THE COURT: Ermakov himself is a hacker, right? 


10:12 10 MR. NEMTSEV: From 2018, your Honor, that has never 


11 been convicted, whose evidence, I would submit to the Court, is 
12 stale. You know, his hacking in 2018 doesn't —-- 


13 THE COURT: All right, I said that wrong. There's 


14 probable cause to believe he's a hacker. There's an 


15 indictment. 


16 MR. NEMTSEV: Yes, but I don't know enough about the 


17 hacking, the way he -- 


18 THE COURT: Well, I don't either, but at least that's 


19 what the magistrate was informed about, right, that he was a 


10:12 20 hacker? 


21 MR. N EV: Yes. There are two indictments pending 


22 from 2018. 


23 THE COURT: Two, so there's at least two that Ermakov 


24 is a hacker? 


25 MR. N 


10:13 10 
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And that the trade was just prior to the 


release of public information? 


MR. N 


EMTS 


public informat 


tion, 


EV: 


The trade was prior to the release of 


two days after the alleged unauthorized 


intrusion into that company, as well as multiple other -- 


THE COURT: 


So at least with respect to Ermakov, would 


you concede there's probable cause? 


MR. N 


EMTS 


EV: 


But they're not searching Ermakov. 


They're searching Mr. Klyushin. 


I mean, 


10:13 20 


21 


22 


23 


24 


25 


there's 


and, B, 


of publi 


THE COURT: 


feel 


like 


Tf there's probable cause as to Ermakov —- 


['m walking down a chain there —- but if 


probable cause as to Ermakov because he's, A, a hacker, 


there was access, and, C, he traded before the releas 


c information, and once he trades in Mr. Klyushin's 


account, 


doesn't that create probable cause as to Mr. Klyushin? 


MR. N 


EMTS 


EV: 


No, your Honor, I don't think it should 


because that transaction, if you actually look at it, if the 


government disclosed the details of it, it wouldn't make any 


sense. 


If you have twelve reports for twelve different 


companies and you see a mixed earnings report where the stock 


Le = 


THE COURT: 


You're just speaking a little too softly. 


MR. N 


EMTS 


EV: 


"m sorry. 


THE COURT: 


Do you want to sit down and just speak 


directly into the mic? 
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ac MR. iV: Yes, maybe, because otherwise 


2 THE It's much better now that the mic is 


3 removed from 


4 MR. ; iV: Yes. 


is : But it's still I'm -—- 


6 I : can pull it closer to you. 


7 : can all hear me well, right? 


8 I ussion f the record between defense counsel.) 


9 . NEMTSEV: So just very quickly, your Honor —--— 


10:14 10 COURT: So much better. 


11 . NEMTSEV: Yes, I agree. My back was starting to 


12 hurt leaning over speaking into the microphone. 


13 THE COURT: So much better. 


14 MR. NEMTSEV: But just very quickly, the Avnet, if 


15 had an earnings report that said Avnet actually beat 


16 expectations in one of the key metrics, why would you short 
Ay stock or sell CFDs that would guarantee a loss? And the 


18 government could have expanded their analysis. They could have 


19 shown that the transaction in Avnet wasn't parallel on the way 
10:15 20 out, meaning it is not sold for a loss -- 
21 THE COURT: So why would you short something that was 


22 doing well? 


23 MR. NEMTSEV: Exactly, why would you short something 


24 that you know is doing well and thereby incurring a loss? 


25 THE COURT: So you're saying, when the eventual 
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] information came out the next day -- 


2 , IMTSEV: The stock went up. 


3 : —- the stock went up. 


4 ; IMTSEV: They lost, they lost money. 


5 THE COURT: The stock went up. So it means anyone who 


6 traded on a short lost? 


7 MR. NEMTSEV: Lost. 


8 THE COURT: I just wanted to make sure. 


9 MR. NEMTSEV: : So that would take it outside the 


10:15 10 heartland, you know, of what they say is insider trading 


11 because they had twelve different reports for additional 


12 companies. They could have traded in any one of them. You 

13 know, and there's no allegation, at least in the affidavit, 

14 that Mr. Klyushin's account or Mr. Ermakov traded in any of the 
LS other companies. Their sole accusation was limited to Avnet. 
16 And, say, even if there's probable cause as to Avnet, that's a 


17 discrete transaction in January of 2020, where the hack 


18 occurred January 21, 2020, the sale of CFDS occurred on the 


19 23rd, and then the subsequent closing of the position occurred 
10:16 20 on the 27th in Mr. Klyushin's account. But they extrapolate 


21 from that broader insider trading, broader allegations that go 


22 back to 2018, and ultimately lead to the seizure of 


23 Mr. Klyushin's entire iCloud account. 


24 THE COURT: Okay, thank you. And what is your 


25 position with respect to whether or not the information in the 
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is 


1 September affidavit incorporated into the information in the 


2 October? 


3 MR. NEMTSEV: 


Well, 


it's not incorporated by 


4 ference, your Honor. 


5 THE COURT: 


understand that. 


looked for that. 


6 MR. NEMTSEV: 


Yess 


7 THE COURT: But is information in there properly 


8 considered in the October? 


10:17 10 


MR. NEMTSEV: 


THE COURT: 


Well, if 


Other than 


the government 


actual number, as you say, the 


MR. NEMTSEV: 


incorporated by reference. 


looked back at the September a 


10:17 20 


21 


22 


23 


24 


25 


said, but -- 


THE COURT: 


used to be a magistrate judge, 


who's excellent, 


Aside from 


I've been thinking about that because 


suppose finding out the 


Lit, 


fruits of 


the fruits of it, it's not 


don't think that the magistrate 


ffidavits to determine what it 


and the odds of this magistrate 


£ 


judge, 


what's —- 


I mean, 


doing a li 


ine-by-line 


it's substantial 


ly similar, 


iguring out 


right? 


MR. 


NEMTSEV: 


some paragraphs; 


it adds a couple. 


t's substantially similar. 


It removes 


It actually removes the key 


belief sta 


T 


trying to 


MR. 


tement -- 


HE COURT: 


£ 


figure out, 


Yes, remember that, 


and so 


as a practical matter... 


NEMTSEV: 


"d argue that it's not incorporated, 


10:18 10 


10:18 20 


21 


22 


23 
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your Honor. 


TH 


25 


FE COURT: That it's not incorporated? 


MR. NEMTSEV: 


TH 


EK COURT: 


not incorporated. 


these motions, 


particularity issue, 


MR. NEMTSEV: 


TH 


Al 


MR. KOSTO: 


That it's not incorporated. 


think you might be right because it's 


Ye 


Ss, it isn’t. 


FE COURT: All right, thank you 


1 right, I'm going to jump to the government right 


the -—- 


TH 


MR. KOSTO: 


Thank you, 


E COURT: The Franks issue. 


the Rajaratnam statement. 


TH 


th 


-- the Franks issue and the omission of 


Should I start 


your Honor. So laid out in 


there's the probable cause issue, the 


and something the defense hasn't described 


with probable cause? 


two affidavits 


little complex becaus 


di 


fFferent, 


E COURT: I would like to understand -- it's a 


are a little bit 


but on one point that's been hotly contested, do you 


take the position that 


October? 


MR. KOSTO: 


only look at the 


The October affidavit 


four corners of the 


t doesn't expressly 


incorporate by referenc 


24 


25 


presented to Judge 


af 


fidavit. 


Tf you think about th 


the September af 


fFidavit, but it was 


Bowler two weeks after 


the September 


sequence, the September 29 
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1 affidavit describes the investigation. Judge Bowler issues a 


2 warrant. As Mr. Nemtsev said, the information that comes back 


3 from Apple says that the iCloud account linked to the email 


4 address and phone number described in the September affidavit 


5 is locked, but that there's another Apple account linked to 1 


6 phone number that's connected to the allegations in both 


7 affidavits; and that's, as Mr. Nemtsev says, what opens the 


8 door to applying to Apple two weeks later to get to the account 


9 that's not locked. 
10:19 10 THE COURT: Well, why was the "it is believed" 


11 sentence deleted? Were you the attorney on that? 


12 MR. KOSTO: I don't believe I was the drafting 


13 attorney, and I don't know why it was deleted, but Judge Bowler 


14 issued the warrant without it. It's clear she didn't rely on 


15 that statement for probable cause. 


16 THE COURT: I don't know, if I were issuing -- if 


17 had two back-to-back affidavits that looked substantially 


18 similar, I don't know that I'd do the side-by-side. 


19 MR. KOSTO: Even if you did, your Honor, the 


10:19 20 government's position is that with respect to either the 


21 September affidavit or the October affidavit, there was 


22 adequate probable cause without respect to that "belief" 
23 statement. 


24 THE COURT: Without respect to the —- 


25 MR. KOSTO: If the Court takes the First Circuit law 
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£ 


1 on point, which is, you know, facts within the affidavit plus 


2 supported opinions, the "belief" statement —-—- 


Si THE COURT: Plus supporting --— 


4 MR. KOSTO: Supported opinions, opinions of the agent 


5 supported by factual background. Our point in our opposition 


6 is, there is support for that "belief" statement. It was 


7 omitted from the affidavit. The drafters, the agent, omitted 


8 it, but it's not necessary to the probable cause finding. We 


9 offered information about what the SEC had told Special 


10:20 10 Agent Kang just to establish that the belief was offered in 


ala good faith. There was no attempt to hide it from the Court. 


12 was advised by the Securities and Exchange Commission that 


13 . Klyushin had traded in parallel with Mr. Irzak as far back 


14 the provision of that spreadsheet some ten months earlier. 


is) . Klyushin wasn't new to the case, because the SEC had sent 


16 email over to Special Agent Kang with a spreadsheet that 


une) mentioned Mr. Irzak and Mr. Klyushin both involved in parallel 


18 trading, of which Avnet was one example that is expressly 


19 described, so -- 


10:21 20 THE COURT: But I can't consider that because 


21 Bowler didn't consider it. 
22 MR. KOSTO: Correct. 


23 THE COURT: So the issue is, it was struck from 


24 October, so it becomes a red herring with respect to October. 


25 MR. KOSTO: That's correct, your Honor, but you don't 


10:21 10 


10:22 20 


2] 
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need to consider the 


cause statement. 


there's a suggestion in 


Agent Kang deliberately or recklessly, 


truth, 


reason 


probable cause, 


£ 


or his belief 


THE COURT: 


October one. 


MR. KOSTO: Su 


THE COURT: 


MR. KOSTO: 


You have from the SEC, 


Authority, 


you have a group of traders, 


Mr. Irzak, Mr. 


correct, 


THE COURT: But 


"belief" 


Let's 


left out the reason for his belief. 


into the affidavit, 


it would stre 


not weaken it, but -- 


res 


I'd start even before that, 


28 


statement vis-a-vis the probable 
We just offered that information because 

the request for a Franks hearing that 
with regard to the 


If he had put the 


ngthen 


jump into probable cause in the 


So you basically have a known hacker. 


your Honor. 


from FINRA, the Financial Regulatory 


Trofimov 


MR. KOSTO: No 


and various brokerages, like interactive brokers, 


, Mr. Stepanov, and others. 


but the investigation begins with 


they are timely trading ahead of public an 


££ 


inancial 


£ 


per 


ormance, 


22 


23 


24 


25 


tocks 


those 


filing agents are the companies 


"earnings place" in 


it's not just the stocks of any company in 


agents, Filing Agent 1 and Filing Agent 2; 


not Ermakov and not Klyushin? 


Russian traders that include 


t Ermakov and Klyushin at the time, 


those referrals, and 


nouncements oO 


the vernacul 


the broad 1li 


£ 


ar. 


st of 


It's only companies that are serviced by those 


filing 


Situations where 


that provide the data 
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il storage before it gets released to the public. So you have 


2 this trading that's going on, but it's only going on in, you 


3 know, the shares of two of the several companies that provide 


4 these services. It's like if every car you see driving by is 


5 Ford, that's not a coincidence. They were breaking into only 


6 Filing Agent 1 -- 


7 THE COURT: Can I just back up for a minute? 


8 . KOSTO: Yes. 


9 COURT: I'm thinking in tandem with you. 


10:23 10 . Frank, are you the one who drafted the —- 


11 . FRANK: I don't have a specific memory, your 


12 Honor, but, actually, the way it works, Special Agent Kang's 


13 practice is, he drafts his own affidavits and we edit them, 
14 sQ-c> 


15 THE COURT: Well, I just want to make sure —-— 


16 MR. FRANK: -—- it's likely that I edited that 


1] fidavit. 


18 THE COURT:  -- under Brady and all that, to your 


19 knowledge, it wasn't deleted because it was wrong? 


10:23 20 MR. FRANK: Absolutely not. 


21 THE COURT: Okay, I'm going to ask you to go back and 


22 talk. And you were both involved at that time? 


23 MR. FRANK: We were, your Honor. And in fact, not 


24 only was it not deleted because it was wrong, it's actually 


25 COrrect.. The statement was true. 
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i THE COURT: It's just weird that it was deleted 


2 because it adds to it. 


3 MR. FRANK: I'm not sure that there was any great 


4 thought given to the -- I think it was more of an editing 


5 issue. But the bottom line is: The statement is true. He had 


6 that belief, and his belief was based on a spreadsheet that was 


7 produced to him pursuant to an access request by the SEC, which 


8 we've produced to the defense; they have it. And that 


9 spreadsheet is a list of individuals -- it does include 


10:24 10 Mr. Klyushin -—- and that spreadsheet is a list of individuals 


11 that the SEC had determined traded in parallel. 


12 THE COURT: Well, what I'd ask you to do, just because 


13 of the Brady doctrine, et cetera, is to go back. I just am 


14 curious as to why it is deleted. And if it was because it 


15 turns out to be wrong, that might be something that had to have 


16 been disclosed. So if it turns out that neither of you drafted 


17 the thing, you may not know why it was. I think, just as a 


18 matter of due diligence, you need to go back and check that. 


19 MR. FRANK: Yes, your Honor. 


10:24 20 MR. KOSTO: But I think, as an answer to the Court's 


21 question, in advance of the hearing, we obtained the 


22 communication of Special Agent Kang, which included 


23 Mr. Klyushin's name along with Mr. Irzak's. So the statement 


24 is not wrong; it just wasn't supported by the source of the 


25 information. But going back to the -- 
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1 THE COURT: It wasn't supported —- 


2 MR. KOSTO: It wasn't supported by saying, "The Sl 


3 provided me with a spreadsheet that lists Mr. Klyushin and 


4 Mr. Irzak together as being involved in parallel trades." 


5 would have been the grammatically correct way to write it. 


6 Instead he wrote, "It is believed that the two trade in 
. parallel in other stocks." 


8 THE COURT: I just want to make sure that statement -- 


9 MR. KOSTO: Yes. 
10:25 10 THE COURT: -- is accurate, and that he didn't come 
Li across information in the two weeks that made it inaccurate. 


12 MR. KOSTO: I think we can represent to the Court that 


13 it's accurate, but we'll go back and check. 


14 THE COURT: Well, it sounds like neither of you two 


15 really did it, and so it really -- 


16 MR. FRANK: Well, I believe I edited it, and so 


LS) might have been the person who took out the sentence. 


18 actually don't remember. But the point is, we have gone back 


19 and checked what the basis for the "belief" statement was -- 


10:25 20 we've checked it with Agent Kang and we've checked it against 


21 the records —-- and the basis for the "belief" statement was 1 


22 fact that the SEC provided Special Agent Kang with a 


23 spreadsheet identifying a whole bunch of Russian traders who 
24 traded in parallel in these stocks, and one of those traders 


25 was the defendant. 
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al. THE COURT: And was it more than the Avnet stock? 


2 MR. FRANK: So the spreadsheet which predated the 


3 affidavit showed that these traders had traded in parallel ina 


4 bunch of stocks, and then the affidavit identifies that he 


5 traded in this particular stock. 


6 THE COURT: I see, So... 


7 MR. KOSTO: I'm sorry? There's sort of an "aha" 


8 moment here with respect to this Ermakov/Klyushin trade, your 


9 Honor, and the reason is because the name wasn't completely 


10:26 10 foreign to the investigation, Mr. Klyushin's name, right? We 


‘lal have the trading by this group of Russian traders, which 


12 include Mr. Irzak, Mr. Trofimov, Mr. Stepanov. We have the 


13 fact that all of the trades seem to be connected to Filing 


14 Agent 1 or Filing Agent 2, and they're coming in that window 


£ 


is) after unauthorized access to the data base and before the 


16 announcement of the information, "timely and suspicious 


17 trading" in the words of the investigation. 


18 And then, with Mr. Ermakov's information, which is 


19 obtained before the September affidavit, you have this 


10:27 20 screenshot of a trade in Avnet. But it's important to keep in 


21 mind, as the Court mentioned, who Mr. Ermakov is. He's twice 


22 indicted for two separate instances of obtaining unauthorized 


23 access to computer networks, once in connection with the 2016 


24 elections in a case out of the District of Columbia, and once 


25 in connection with access into the databases of anti-doping 
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1 investigations out of the Western District of Pennsylvania. So 


2 you have a twice-indicted hacker who is now within the scope of 
3 the investigation and is trading in Avnet; not just trading in 


4 Avnet but trading in someone else's name in Avnet, which the 


5 government would submit is not a typical sequence of events. 


6 Why does this hacker have in his phone evidence of a trade in 


7 Avnet in Mr. Klyushin's name? And not just that but a trade 


8 that fits the exact -- 
9 THE COURT: Mr. Klyushin is the head of M-13, right? 


10:28 10 MR. KOSTO: He is. That's not -- 


11 THE COURT: And is Ermakov an employee? 


12 MR. KOSTO: Both of those facts are true. Neither is 


13 alleged in the affidavit, your Honor. 


14 THE COURT: Okay, all right, so I put those to the 


16 MR. KOSTO: Correct, and those are outside the four 


17 corners. We're not asking you to go outside the four corners 


- 


18 of the affidavit to make a probable cause finding here. 


19 But then you look at the timing of the Avnet trade. 


10:28 20 The timing of the Avnet trade is within that window, after the 


21 5th, before the announcement. And then, because the agents 


22 have Mr. Ermakov's communications from his iCloud account, 


23 there's evidence that Mr. Klyushin is stored as a contact in 


24 Mr. Klyushin's Apple contacts. They know each other. The 


25 agents put up a pen register and trap and trace in May of 2020, 
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1 or had put up a pen register and trap and trace on 


2 Mr. Ermakov's account, and it shows communications historically 


3 between Mr. Klyushin and Mr. Ermakov. So -- 


4 THE COURT: Five months after the trade, though. 


5 MR. KOSTO: Five months after the trade. That happens 


6 to be when the pen register was put up. But as soon as the pen 


7 register is put up, it starts showing —- 


8 THE COURT: I see, so they didn't capture whether 


9 it's not as if there were no communications before that. It's 


10:29 10 just they don't capture past communications like other kinds of 
11 warrants? 


12 MR. KOSTO: The affidavit is silent on that. It can 


13 only capture communications between May when the pen is put up 


14 going forward, but the fact that there were communications 


15 between two men who are in each other's contacts and trading in 


16 each other's accounts gives fuel, your Honor, to the probable 


17 cause that there would be communications between these two men 


18 in Mr. Klyushin's iCloud account. These are two men who are 


19 engaged in financial transactions involving a suspicious stock 


10:30 20 in a suspicious time period, who know each other and talk over 


21 WhatsApp. And Agent Kang's affidavit sets forth the training 


22 and experience that iCloud accounts store WhatsApp information 
23 when backed up. 
24 One guick detour on the guestion of what happened to 


25 the stock. Mr. Nemtsev is correct in his Exhibit 6 that the 
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i tock initially went the opposite direction of the prediction. 


2 It was shorted, the stock went up, but then it went immediately 
3 down. 


4 THE COURT: When you say "immediately," like —-- 


5 MR. KOSTO: Within a day or two. It looks like an 


6 upsidedown candy cane. The question is really one for a trial. 


7 It's not what happens to the stock. It is what was the bet 


£ 


8 based on? The bet was based on a negative 


inancial report. 


9 The company missed its earnings. The shorting of the stock is 


10:30 10 a prediction that it will go down. The fact that it goes up 


1] immediately just means that sometimes the market doesn't go in 


12 the direction that the material nonpublic information that's 


13 taken would predict. The market is a fickle beast. 


14 That's neither here nor there as to the determination 


15 of probable cause because Mr. Klyushin's trading -- Mr. Ermakov's 


16 trading in Mr. Klyushin's account is consistent, not just with 


LS} the Avnet trade but with what Mr. Irzak and Mr. Stepanov and 


18 Mr. Mr. Trofimov are doing, as described throughout the first 


19 ten, fifteen, twenty paragraphs of the September affidavit. 


10:31 20 THE COURT: £ find there's probable cause with 


21 respect to one trade in January, 2020 because there's no 


22 longer, and there really hasn't ever been, an allegation of 


23 evidence that he was parallel trading, is that right, before 


24 that? 


25 MR. KOSTO: There is. The SEC spreadsheet lists him 


10:32 10 


10:32 20 


21 


22 


23 


24 


25 
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as someone who was 


THE COURT: 


involved in other trades? 


MR. KOSTO: 


traded in parallel 


involved in parallel trading. 


36 


In fact you've looked at it. Was he 


asked you that before about -- 


Oh, it's indisputably true that he 


with Mr. Irzak in security -- 


THE COURT: 


MR. KOSTO: 


to Judge Bowler. 
THE COURT: 
MR. KOSTO: 
THE COURT: 

judge doesn't know 


MR. KOSTO: 


Other than Avnet? 


Other than Avnet. That wasn't disclosed 


t's just untrue. 


t wasn't disclosed, okay, so —-- 


At this point, though, the magistrate 


that, so all we have is the one trade. 


And Agent Kang's statement that he 


believed it was true based on information in -—- 


THE COURT: 
MR. KOSTO: 
THE COURT: 


ith, how much do 


11 that Judge Bowl] 


But that was only in the September one. 


It was only in the September one. 


In October -- this is why I started off 


have to consider one versus the other? 


er knows iS one suspicious trade. 


So the 


question that I have is, assuming one bad trade, I think the 


challenge is, why did you go back to -- is there a way in 


which, when your team goes in to look, 


why does the search go 


back to 2005? Is there a way of just saying, "I'm only going 


to take 2018 to the present"? 


MR. KOSTO: 


Let's talk about that for a second. 
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a] 


alt THE COURT: Because it iS a worrisome -- 


2 MR. KOSTO: It has been the case this starts with 


3 Rule 41, your Honor. Rule 41(e) (2) describes the way in which 


4 electronic evidence is seized and then searched, not just in 


5 this district and not just in this circuit but nationwide for 


6 the past couple of decades. Rule 41(e) (2) contemplates the 


£ 


7 seizure of electronically stored information for later review, 


8 which is exactly what happened here. The warrant directed 


£ 


9 Apple to provide the contents of the account for a date-limited 


10:33 10 period, January 1, 2018, to the present. Apple may have 


1] provided more than that. But even if the warrant had said 


12 provide everything -—- 


13 THE COURT: Well, why didn't Apple just provide 2018 
14 to the present? 


15 MR. KOSTO: I can't speak to Apple, but -- 


16 THE COURT: Well, why did you take more than 2018 to 
LS} the present? 


18 MR. KOSTO: My take is, the cases say that it is not 


19 on the Googles and Apples of the world to review the contents 
10:34 20 of their subscriber's account and decide what's relevant. 


21 They're not the ones going through and making relevance 


22 determinations or evaluating whether something is evidence 


23 THE COURT: For sure, but it does say, and I'm reading 


24 the warrant... I understand they're not going through to say, 


25 well, what's relevant to insider trading, but it's easy to pick 
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1 up the year. 


2 MR. KOSTO: But the point is, for the agents, what the 


i) ts do -- and Mr. Klyushin gets in discovery the entire 


4 unt because it's full of his Rule 16 statements. All the 


< 


5 unications with his wi 


e and his photographs, he gets them 


6 use we got them, but if they're not —-- 
a THE COURT: You're not trying to argue you can use 
8 them, can you? 


9 MR. KOSTO: No. We didn't seize them. The warrant 


10:34 10 permits the seizure of information that is evidence, fruits and 


11 instrumentalities of six specific federal crimes. The fact 


12 that —-- 


13 THE COURT: I'm just saying, do you stipulate that 


14 this case goes to trial, you cannot use anything that 


15 tes 2018? 


16 MR. KOSTO: Yes, with the caveat that something from 


1] November of 2017, for example, could refer to the existence of 


18 the relationship in 2018. So if you have, for example -- 


19 THE COURT: I'm not sure 


10:35 20 MR. KOSTO: If you have a document in December -—- this 


21 is an evidentiary guestion -- if you have a document in 


22 December of 2017 that refers to a January, 2018 real estate 


23 closing, that's not a 2017 document that can't be used in 
24 connection with a 2018 -- 


25 THE COURT: Well, is there such a document? 


10:35 10 


10:36 20 


21 


22 


23 


24 


25 
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MR. KOSTO: 


evidence of a real 


THE COURT: 


saying that there may not be something which sort of 


doctrine of complet 


whole, don't unde 
the warrant says 20 


MR. KOSTO: 


general matter, Ia 


39 


That's a -- we're not offering any 


estate closing -- 


But just as a general matter -- I'm not 


like the 


eness or something may let in, but on the 


to 2018 if 


rstand why they seized from 2005 


18 forward. 


Those are not seized, your Honor. AS a 


gree with the proposition that from 


fo 


£ 


rward is the records and information the 


January 1, 2018, 


government is going 


£ 


in 


entire scope of 


to be introducing, but Apple produced the 


ormation. The agents searched within that 


£ 


find evidence, f 


to 


THE COURT: 


Apple, "Oh, we're g 
MR. KOSTO: 
THE COURT: 
that what it's call 
MR. KOSTO: 


not obli 


ruits and instrumentalities of -- 


But they didn't start in 2018 and say to 


oing to delete these"? 


We didn't. 


What's it called, a filtration team? 


ed? 


It's not a filter team, but the agents are 


ents would be unwise to delete evidence that 


the ag 


Apple provided -—- 


THE COURT: 


from here. 


MR. KOSTO: 


THE COURT: 


All right, 


fine, but let's go from here, 


Yes. 


I'm troubled by it. said, you know, 
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1 you can go into, I don't know, a second-floor apartment in a 


2 triple-decker and someone went into the first-floor apartment, 


3 that would be suppressed. 


4 MR. KOSTO: What would be suppressed was what was 


5 taken out of the first-floor apartment. 
6 THE COURT: Fine, all right, but here this was taken. 


a MR. KOSTO: It wasn't taken when Apple sent it. Apple 


8 sent it in response to the warrant. The government didn't send 


9 from 2005 to 2018. Apple sent that material, and the 


££ 


or evidence, fruits and 


10:36 10 government looked within it 


£ 


11 instrumentalities from 2018 forward. 


12 THE COURT: Oh, so you didn't look at anything before 


14 MR. KOSTO: We clearly looked at things before 2018 to 


15 determine whether they were related to 2018. 
16 THE COURT: Did you go back to 2005? 


17 MR. KOSTO: No, your Honor. 


18 THE COURT: So he's saying that all this stut 


19 introduced at the bail hearing. 


10:37 20 MR. NEMTSEV: The November, 2017, your Honor, 


21 photograph regarding awards, medals, things that are unrelated 
22 to insider trading in any way. 


23 THE COURT: Oh, is that the award from President Putin? 


24 Is that the -- 


25 MR. N ives t was a different award but very 
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10:38 10 


10:38 20 


21 


22 


23 


24 


25 


THE COURT: 


MR. KOSTO: 


41 


It was a photograph prominently featured —-— 


don't know what 


But the timing of 


the government intends to introduce at 


the timing on everything 


the communications that 


trial are the 


communications between Mr. Klyushin and Mr. Ermakov while the 


conspiracy is ongoing, after January 1 


THE COURT: 


, 2018. 


Well, actually, the conspiracy charged is 


2019. No? Do I have it here? Well, 


I'm just troubled by the 


breadth; let's put it that way. Are there cases on how you 


think about what to do wit 


MR. KOSTO: 


United States v. Aboshady, 


th iCloud accounts? 


Absolutely, your Honor. Let's start with 


which is a First Circuit case. Te 


was an appeal from a case of Judge Gorton's. It was a fraud 


case in which the government, 


and thousands of emails, 


much like here, was accused of 


taking the entirety of a defendant's email account going all 


the way back, every email from a long period of time, thousands 


including intimate photographs -- not 


intimate photographs but photographs of the defendant and his 


wife in the labor and delivery room in connection with the 


birth of the defendant's child, 


THE COURT: 


MR. KOSTO: 


COURT: 


KOSTO: 


and the government wasn't —-- 


Were you involved in that case? 


No, I was not. 


thought you were all things computer. 


That one predates 


me, your Honor. 
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1 THE COURT: All right. 


2 MR. KOSTO: But what the First Circuit holds is, the 


3 fact that personal pictures or communications between husband 


4 and wife are obtained during the search warrant process, that's 


bs not the metric. Yes, the government obtained personal 


6 communications and personal photographs of the defendant, but 


- those were not the ones seized. They might have —--— 


8 THE COURT: You're saying they weren't seized. 


9 mean, you didn't have a raid team run into somebody's room, but 


10:39 10 you basically issue a warrant to Apple. I'm constantly issuing 


11 nondisclosure orders, so Apple is not telling anyone that they 


12 were seized, and then you -- I didn't do it in this case, but 


13 do it as a matter of course. And so those were effectively 


14 seized. That's the way you seize electronic information, with 


15 a warrant. 


16 MR. KOSTO: This is described in the case law, your 


Ls} Honor -—- and I'll cite you to a couple cases -- as the two-step 


18 process. 


19 THE COURT: Okay. 


10:39 20 MR. KOSTO: Step one is the Internet service provider, 


21 the electronic communications provider, provides the entirety 


22 of the content because, as the Ray case holds, law enforcement 


23 need not rely on an email host company or any other private 


24 party to sift through emails to determine what is relevant. 


25 THE COURT: I agree with that. 
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i MR. KOSTO: So everything comes over. 


2 THE COURT: But that's relevance, not timing. 


Si MR. KOSTO: Correct. And then the government reviews 


4 what is produced to identify information to seize. It sounds 


5 inapt because it's already been taken from Apple, but it's 


6 Apple that sent it over. What the government seizes is what 


- they look through and pull once they have the entirety of the 


8 account. 


9 THE COURT: So did the government here look through 
10:40 10 things before 2018? 


11 MR. KOSTO: The government could properly look through 


12 things before 2018 to determine if they relate to things after 


13 2018. 


14 MR. FRANK: £ could just give a —- 


15 THE COURT: Assume your case -—- you know, this is a 


16 January, 2020 trade -- that maybe you could look at December to 


17 see if something laid it up, but I can't see a basis for going 


18 back to 2005. 


19 MR. FRANK: Your Honor, if we go into somebody's house 


10:40 20 and we have a search warrant to search somebody's home office 


21 for materials from 2018 on, we're allowed to search the entire 


22 home office and all of the files in it, but to seize only the 


23 documents from 2018 on. But we can look at all the documents 


24 to determine, are those documents from 2018 on? Otherwise 


25 there's no way to practically seize the ones from 2018 on. 
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i THE COURT: But if you had a file cabinet, just to 


2 lay this out, that says 2018, 2017, 2005, you would not be 


3 llowed to look in the file cabinet from 2005. 


4 MR. KOSTO: You'd be justified to look -- 


5 THE COURT: Anyway, I think I've got the issue. And 


6 is there any one of these cases, and we'll look further, that 


7 deals with the timing issue? But I'm not sure it matters if I 


8 just chop it off; you can only introduce any evidence from 2018 


9 forward. 


10:41 10 MR. KOSTO: In Aboshady, the case I was describing 


11 which the court held that the government's mere possession of 


12 these kind of photos doesn't negate the entirety of the 


13 warrant, Aboshady says, "The remedy in the case of a seizure 
14 that casts its net too broadly is not blanket suppression but 
15 partial suppression." 


16 THE COURT: Okay, all right, so I've got the nub of 


1] this issue. 


18 MR. KOSTO: So that is the probable cause issue, your 


19 Honor. And you asked, well, why wouldn't it just be as to 


10:42 20 Avnet? Because the affidavit sets forth a description of a 


21 scheme, a scheme that involves trading in multiple securities 


£ 


ror 


22 in a timely fashion, the Avnet is one example. Accepting 


23 the moment that the affidavit establishes probable cause to 


24 believe that Avnet is part of a scheme of Russian traders who 


25 are gaining unauthorized information, trading on that 
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] information and profiting from it, it wouldn't make sense for 


2 the government to have to go in and say, "Ah, here's Avnet. We 


3 found Avnet. Let's go back to the court now and ask for the 


4 next stock, and then come back to the court again and ask for 


bs the next stock." The affidavit sets forth a scheme that's 


6 fairly consistent. 


7 THE COURT: Okay, thank you. I think I've got this. 


8 I'm going to allow defendant's counsel to -- you didn' 


9 don't know if I cut you off prematurely, but you didn't get a 


10:43 10 chance to address the Franks issue, and I thought I needed to 
11 go back and do that. 
12 MR. KOSTO: Sure, and before we finish that -- 


13 THE COURT: I don't want you they need to address 


14 it before you do, I think. 


iS) MR. KOSTO: Correct, but before I finish that, I think 


16 this is a good point to mention because the First Circuit has 


17 chided us in the past for not raising it, but the agents would 


18 be entitled to the good-faith exception under Leon for 


19 presenting this affidavit to Judge Bowler, for having 


10:43 20 Judge Bowler sign it, and for being the kind of affidavit that 


21 we could have an hourlong discussion about whether or not 


22 probable cause exists. That's not the kind of case where 


23 probable cause is so absent that no reasonable officer could 


24 rely on the affidavit. 


25 THE COURT: Fair enough. It's fair enough to raise 
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2 . NEMTSEV: And, your Honor, I would disagree with 


3 my colleague. You can't have probable cause for one transaction, 


4 Avnet, and then go in and seize everything. It is a seizure. 


is THE COURT: But let's assume I limit it to 2018. I'm 


6 sort of leaning that way unless there's a hook that somehow 


- under the doctrine of completeness —- 


8 MR. NEMTSEV: There's more than just 2018. That's 


9 just the temporal scope, but they violated blatantly by going 


10:44 10 back and seizing pictures from November of 2017 and then using 
11 them. You know, yes -—- 


12 THE COURT: That may be, but isn't the remedy, as 


13 counsel pointed out, just you lop those off from the trial? 


14 MR. NEMTSEV: Not always, your Honor. "When executing 


15 agents are considered to 'flagrantly disregard’ the warrant's 


16 terms where they affect a widespread seizure of items that were 


A} not within the scope of the warrant and don't act in good 


18 faith, then the extreme remedy of blanket suppression should be 


19 imposed." 


10:44 20 THE COURT: All right, so you're urging a broader 


21 


22 ‘ EMTSEV: am, your Honor, I am, because it's 


23 such a broad seizure. And I know they say it's not a seizure, 


£ 


24 but once you get it from Apple, to me, it's a seizure. Once 


25 you start searching it and you search outside the bounds and 


10:45 10 


10:46 20 


21 


22 


23 


24 


25 
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there were some pictures 
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then use things that are outside the bounds of the warrant, 


that's using evidence that you're not entitled to. 


can I ask you this. I understand 


taken of hi 


s family and of him getting 


some award from the Russian government. Was there anything 


that came in that you saw that was relevant to the charge of 


parallel trading? 


MR. NEMTSEV: Very little, 


your Honor. 


THE COURT: So what you're trying to say, I think, is, 


even if I impose that sanction, 


it doesn't really affect the 


case very much? It's not the heart of the case. Let's put it 


that way. It's all post-2018. 


MR. NEMTSEV: Yes, 


THE COURT: AIL1l 


your Honor, but -- 


right, so no picture of the wife, no 


picture of the award, still the heart of the case is post-2018? 


MR. NEMTSEV: The heart of 


the heart of the case relies on the 


Honor. 


THE COURT: Yes, yes, yes, 


decide probable cause, 


agree. 


the case is post-2018, but 


iCloud search warrant, your 


[ would still have to 


MR. NEMTSEV: You would still have to decide probable 


cause. You would exclude a ] of, 
gigabytes worth of evidence is a lot. 


that's probably 20, 30 mi 


illion pages 


THE COURT: Well, how many 


you know, evidence. 380 


I mean, you know, pages, 


post-2018, how many pages? 
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ac : EV: Significant amounts as well, but 


2 the bulk 


3 COURT: Probably a lot less, a lot less, so —- 


4 . NEMTSEV: couldn't quantify it for you, your 


6 COURT: Okay. 


7 MR. NEMTSEV: can't quantify it for you. 


8 THE COURT: Please address the Franks issue. You can 


So 


9 rest on the briefs i 


you choose to do so, but I thought we —- 


££ 


10:46 10 I mean, I cut you o prematurely. I'm sorry. 


11 MR. NEMTSEV: just wanted to say a couple words in 


12 response. I did calculate how many search warrants Judge Bowler 


13 issued in between September and October. It was forty-five. 


14 THE JRT: How many? 


15 MR. IMTSEV: Forty-five. 


16 JRT: Forty-five search warrants? 


17 MR. NEMTSEV: Forty-five other search warrants that 


18 she issued. So it's unlikely that in October she's thinking 


19 back forty-five warrants or before that, "Oh, I remember that 
10:46 20 there was " 


21 JRT: Yes, that is unrealist 


22 MR. IMTSEV: "__ belief statement 


23 THE RT: It's unrealistic that she went and did a 


24 line-by-line parison. I agree with that. 


25 MR. NEMTSEV: . I think she just relied on the 
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ac contents of the October warrant, which excluded allegations of 


2 broader parallel insider trading -- 


Si THE COURT: Right, and I'll only look within the four 


4 corners of the October affidavit. 


is MR. NEMTSEV: Yes. 


6 In terms of what Agent Kang was advised by the SEC, 


h have the spreadsheet in front of me, but the spreadsheet says 


8 nothing. It's just a list. You know, there's nothing 


9 indicating that it was a list of parallel transactions, it was 
10:47 10 a list -- 


Ac. THE COURT: Do I have that? 


12 MR. NEMTSEV: No, your Honor. I've never filed it, 


13 I could provide the Court with a copy. 
14 THE COURT: Yes, why don't you provide one and we'll 


15 mark it, in case that should come up later. 


16 . NEMTSEV: would just ask that it be filed under 


18 THE COURT: Yes, yes. 


19 . NEMTSEV: n the sense that so many transactions 


10:47 20 took place in Filing Agents 1 and 2 or companies serviced by 


21 Filing Agents 1 and 2, there's only three filing agents in the 


22 United States that service public companies. These Filing 


23 Agents 1 and 2 service the bulk of the marketplace, you know, 


£ 


24 and the majority, thousands of companies. You know, the fact 


25 that somebody had, you know, majority of transactions in Filing 
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1 Agents 1 and 2 means nothing. It doesn't really add 1 


2 calculus. In all honesty, it's almost strange that it 


3 traded in companies serviced by Filing Agent 3, if he had 


4 information coming from Filing Agents 1 and 2 relating to their 


is customers. 


6 THE COURT: Listen, just getting to the Franks issue, 


7 I understand that the agent had been criticized ten years 
8 earlier —- 


9 MR. NEMTSEV: He was, Judge. 


10:48 10 THE COURT: -- in a case even I had heard about, the 
‘lal Rajaratnam case. It was very famous at the time. So he was 


12 criticized. Ultimately, the Second Circuit didn't exclude 


13 information based on Franks, so it's a little hard to -- the 


14 First Circuit has basically said that that's not enough. 


15 MR. NEMTSEV: So slight differences. In the Second 


16 Circuit in the Rajaratnam case and in the First Circuit -- 


LS] forget the name, your Honor -- 


18 THE COURT: I do. 60: 


19 MR. NEMTSEV: Yes there was both ample probable 


10:49 20 cause outside of the belief statements or misstatements or 


21 omissions that were present in those cases on the agent's 


22 testimony. Here, aside from Avnet, it's only that belief. In 
23 order to issue that broad warrant, the magistrate judge had to 


24 have rested on that belief, had to have -- 


25 THE COURT: But can I just say, that's why 


10:50 10 


10:50 20 


21 


22 
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off with, which warrant do I look at? 


MR. NEMTSEV: The September one, 


THE COURT: Yes, 


one, the objective beliefs of Mr. 


MR. NEMTSEV: Correct, 


beliefs are beside the point, but for the 


they're -- 


THE COURT: But even if 


believed" comment, the rest of it 


51 


your Honor. 


that's the September. The October 


Kang are beside the point. 


for the October one, his 


was getting held up on the Franks issue. 


is in there. So that's why 


September ones, 


I were to exclude the "it is 


MR. NEMTSEV: The rest of it is in there, and that 


would lead to Avnet, and that would be —- 


THE COURT: Yes. 


All right, anything you want to say on this? 


MR. KOSTO: Just 


v. Southard, which just is so on point —- 


MR. NEMTSEV: That's the name. 


think your Honor has United States 


MR. KOSTO: -- that this ten-year-old allegation, that 


actually never came to anything, wouldn't 


reason to know he needed 


that the defense has poin 


to disclose it. 


ted to in the aff 


give Agent Kang a 


And there's nothing 


fFidavit that they 


allege is false. The classic Franks situation is, "You didn't 


23 


24 


25 


allege the cooperating witness's criminal 


judge had been aware of that, 


history. If the 


they would have scrutinized the 


statement and concluded that the cooperating witness was lying 


Case 1:21-cr-10104-PBS Document 114 Filed 11/18/22 Page 52 of 59 


52 


ac and that there was no drug deal." Here, that statement is 


2 isconnected, or the lack of the inclusion of Rajaratnam is 


pt 24 


3 disconnected from anything in the affidavit that Judge Bowler 


4 signed. As the Court notes, there's no "belief" statement in 


bs the October affidavit, and it's really extraneous to probable 


6 cause for the September affidavit for all the reasons that 


7 we've shared. 


8 THE COURT: Okay, all right, thank you. So I'm going 


9 to take the motion to suppress under advisement. I've denied 


10:51 10 the motion to dismiss. The government is going to file the 


11 spreadsheet under seal that you're all referencing -- I don't 


12 think I have it, I think that's right, I don't have it -—- and, 


13 in addition, you're going to just do an inquiry of Mr. Kang if 


14 he remembers why he deleted that. 
15 We have a firm trial date in early January. No, late 


16 January, late January. That's right, late January. And do we 


17 have a pretrial conference date? 


18 MR. NEMTSEV: January 5, I believe, your Honor. 


19 THE COURT: What do we think the length of this trial 


10:52 20 might be? 


21 MR. NEMTSEV: No longer than two weeks, 


22 COURT: Two weeks half days? 


23 . NEMTSEV: Two weeks half days. 


24 . KOSTO: I agree, your Honor. 


25 COURT: Two weeks half days. I'm trying to plan 
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1 my life in February. All right, so -- 


2 THE CLERK: And I think we're going to switch the date 


i) to Monday because we're not impanelling on Tuesdays. 
4 THE COURT: Yes, we're impanelling back on Mondays 
5 now, just So we can —— 


6 THE CLERK: It will be the 30th instead of the 31st. 


7 THE COURT: All right, and we have a pretrial date. 


8 And I understand -- I really don't want to continue it again. 


9 I did understand there was so much information. I sort of 


10:52 10 wished I had held this hearing beforehand because I would have 


‘lal chopped off everything before 2018, unless the government made 


12 a particular plug for something, so -- 


13 MR. KOSTO: The government doesn't expect to introduce 


£ 


14 evidence from before 2018. 


[f there's an offhand piece of 


££ £ 


15 evidence from before that, we'll offer justi 


£ 


ication for it and 


16 why it fits within the terms of the warrant. That's all. 


ike) MR. NEMTSEV: And, your Honor, could I just address 


18 that 2018 date? I don't understand where January, 2018, comes 


19 from. 


10:53 20 THE COURT: Isn't that what the warrant said, from 


21 


22 . NEMTSEV: That's what the warrant says, but 


23 Agent Kang also states in his affidavit that the earliest the 


24 hack occurred was November of 2018. Mr. Klyushin didn't have a 


25 Saxo Bank account until June of 2019, and the transaction in 
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1 Avnet took place in January of 2020. [t doesn't make sense to 


2 me why the start date for probable cause is January of 2018. 


3 THE COURT: I see. So you're saying it should be when 


is . NEMTSEV: t should be much later. 


6 COURT: -—- got the account or something like that? 


7 MR. NEMTSEV: Yes. 


8 MR. KOSTO: The affidavit sets forth information about 
9 parallel and suspicious trading as early as August of 2018. 


10:54 10 The January 1, 2018 date is meant to capture the relationships 


11 that would lead to that trading. 


12 THE COURT: All right, thank you. I hadn't realized 


13 you were challenging that time period. Was that in the brief? 


14 MR. NEMTSEV: t was, your Honor, in the reply brief. 


15 THE COURT: Okay. 


16 MR. FRANK: £ could just add one thing. Obviously 


Ly Mr. Kosto has done a great job, but the only thing I would say, 


18 your Honor, is, there's no reason to chop anything off because 


19 it's been chopped off. The search warrant exists. It 


10:54 20 authorizes a seizure from that date forward. If we were to 
21 offer something prior to that date —- 


22 THE COURT: I just wanted -—- look, Mr. Klyushin is 


23 incarcerated. It's impossible, it's very difficult to get 


24 computer access to things. I just want to take this off their 


25 plate that they even have to think about it. So unless you do, 
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1 as you say, a special proffer or whatever, anything before 


2 January 1, 2018, is o the table. 


3 MR. FRANK: Yes, your Honor. 


4 THE COURT: Okay. But in the meantime, I've taken the 


5 motion to suppress under advisement, and I think we've done 


6 what we need to do today, unless there's some other issue that 
7 we need to address. 


8 MR. FRANK: Not for the government, your Honor. 


9 MR. NEMTSEV: Just a question, your Honor. We have 
10:55 10 the January 5 conference. Do you want us to file motions in 
11 limine ahead of time? 


12 THE COURT: Haven't we sent out the I think we sent 


13 out a pretrial order. If we didn't, we should have. 


14 MR. NEMTSEV: We have one for September, but we don't 


15 have one for January. 


16 THE COURT: Maybe you two confer about when the 


ay updated pretrial order is. I'm pretty flexible as long as I 


18 have a chance to read the stuff. Most people don't do much in 


19 that week between Christmas and New Year's, so hopefully 
10:55 20 everything will come in before that. 


ZA MR. FRANK: Your Honor, I'm in trial the two weeks 


22 before that. 
23 THE COURT: Are you? Where are you on trial? Over 
24 Christmas? 


25 MR. FRANK: No. The two weeks before Christmas. 
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i COURT: Who are you in front of? 


2 . FRANK: Before Judge O'Toole. 


3 COURT: Well, okay. 


4 . FRANK: It's some holiday season for me. 


5 COURT: It's going to be really busy. 


6 MR. FRANK: It will be, but we'll confer with the 


7 defense on the dates. 


8 THE COURT: Yes, just confer. But here's what you 


9 can't do to me, is file everything on the 24th and assume I'm 


10:56 10 going to read because I have family time too, and the 5th comes 


11 right up. So, ideally speaking, things will come in the week 


12 before Christmas. 
13 THE CLERK: Do you want stipulations on the docket? 


14 THE COURT: Yes. When can you confer and file that? 


15 MR. FRANK: We can do that this week, your Honor. 


16 THE COURT: And let me just get a sense of this. 


LS) your trial primarily forensic computer people? 


18 MR. FRANK: It's computer people. It's analysis of 


19 the stock trading, so it's SEC people. 


10:56 20 THE COURT: So there are no live percipient witnesses? 


21 MR. FRANK: No. It's the victims, and it's the case 


22 testifying about communications that were seized. It's 


23 to be a short and sweet trial from the government's —-— 
24 THE COURT: All right, but there may be Daubert or 


25 something like that. 


10:57 10 
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from your point of view, are you having your own 


MR. 
expert anda 


THE 


NEMTSEV: We will. We'll have a computer forensic 
trading expert, your Honor, to —-- 


COURT: All right, so it's a very technical trial? 


MR. 


about it. 


THE 


NEMTSEV: t is. There's nothing interesting 


COURT: Well, I wouldn't say that. It's important 


to Mr. Klyushin. 


MR. 


interesting 


NEMTSEV: t's very important but nothing 


for the jury. 


10:57 20 


THE 
MR. 
their seats, 
THE 
MR. 
their seats. 


THE 


COURT: All right, well, whatever. 


FRANK: We're going to keep them on the edge of 
your Honor. 
COURT: What? 


FRANK: We're going to keep them on the edge of 


COURT: All right. My biggest concern is finding 


a jury, between COVID and -—- I want to make sure it's fair and 


impartial and any preexisting -—- 


21 


22 


23 


24 


25 


confer about 


I would hope let me just think about this one -- 


£ 


that if there's a mention of top officials in Russia, I think 


that would make it difficult to find a jury. So I don't know 


to the extent there will be evidence of that, but maybe you can 


that. 
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MR. N 


EMTS 


EV: 


in limine, your Honor. 


THE CO 


URT: 


IT thought so. 


as to how many people we call in, 


that, okay? 


MR. N 


EMTS 


THE CO 


THE CL 


(Adjourned, 


URT: 


ERK: 


EV: 


all 


all 


58 


That was one of my anticipated motions 


It might make a difference 


so just talk and think about 


Yes, your Honor. 


rise. 


10:58 a.m.) 


right, thank you. Thank you. 
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